Privacy Policy for InnPulse EMS Workout Studio
Effective Date: 31st August 2025
InnPulse EMS Workout Studio (“InnPulse,” “we,” “our,” or “us”) is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and the UK GDPR. This Privacy Policy explains how we collect, use, store, and share your personal information, as well as your rights under applicable data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
InnPulse EMS Workout Studio
Name: Sam Allen
Email: Luton@Innpulse.co.uk
Phone: 01582-354660
2. Information We Collect
We may collect the following categories of personal data:
a. Identity & Contact Data
Name, date of birth, address, phone number, email address, emergency contact details
b. Health & Fitness Data (Special Category Data)
Relevant medical history, fitness goals, training preferences
Measurements, body composition, workout performance data
(We only process this information with your explicit consent for the purposes of providing safe EMS training.)
c. Financial & Transaction Data
Billing address
Payment details (processed securely by third-party payment providers; we do not store full card information)
d. Technical & Usage Data
IP address, browser type, device identifiers, and usage data from our website or mobile applications
Cookies and tracking technologies (see Section 9)
3. Lawful Bases for Processing
We process your personal data only where we have a lawful basis under GDPR:
Contract: To deliver EMS workout services, manage bookings, and process payments
Consent: For processing health-related data, sending marketing communications, and using cookies (where required)
Legal Obligation: To comply with health, safety, tax, or other regulatory requirements
Legitimate Interests: To improve our services, ensure security, and communicate relevant updates (without overriding your fundamental rights)
4. How We Use Your Information
We use your personal data to:
Deliver safe and personalized EMS workout programs
Communicate with you regarding sessions, memberships, and inquiries
Process payments and manage accounts
Conduct health and safety assessments
Improve our services, facilities, and digital platforms
Send you marketing (only with your consent, which you can withdraw at any time)
5. Sharing Your Data
We do not sell or rent your personal data. We may share it with:
Authorised InnPulse trainers and staff
Third-party service providers (e.g., payment processors, scheduling software, email/SMS platforms)
Healthcare professionals in case of medical emergency
Regulatory or legal authorities if required by law
Where third-party providers process data outside the UK/EU, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined in this Policy, including legal, accounting, or reporting obligations. Health data will be securely deleted when no longer required for service provision.
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
Right of Access: Obtain a copy of the personal data we hold about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to legal obligations
Right to Restrict Processing: Limit how your data is used in certain circumstances
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or direct marketing
Right to Withdraw Consent: Withdraw consent at any time, without affecting prior lawful processing
To exercise your rights, contact us at Luton@innpulse.co.uk
8. Data Security
We use appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
9. Cookies & Tracking Technologies
Our website uses cookies to improve your browsing experience, analyze traffic, and personalize content. You will be asked for consent where required. You can manage cookie preferences in your browser settings.
10. Children’s Privacy
Our services are not directed to individuals under 16. We do not knowingly collect children’s personal data without parental consent.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website with the updated “Effective Date.”
12. Complaints & Supervisory Authority
If you have concerns about how we handle your personal data, please contact us first at [Insert Email].
If you remain unsatisfied, you have the right to lodge a complaint with the relevant supervisory authority:
UK: Information Commissioner’s Office (ICO) – www.ico.org.uk
EU: You can contact your local Data Protection Authority (DPA)
13. Contact Us
For questions, requests, or complaints regarding this Privacy Policy:
InnPulse EMS Workout Studio
Email: Luton@innpulse.co.uk
Phone: 01582-354660
Address: Hedley Rise, Luton.